When you use Copilot in Microsoft 365 apps, you may see the error message “You do not have access to this content.” This blocks Copilot from reading or summarizing files, emails, or calendar items. The problem almost always comes from missing or misconfigured permissions in your Microsoft 365 tenant. This article explains the root cause and gives you step-by-step fixes to restore access.
Key Takeaways: Fixing Copilot Access Denied Errors
- Microsoft 365 admin center > Roles > Role assignments > Copilot Administrator: Assign this role to users who need full Copilot access.
- Microsoft 365 admin center > Settings > Org settings > Copilot > Data sources: Enable SharePoint and OneDrive data sources so Copilot can index content.
- SharePoint admin center > Site permissions > Direct access: Grant explicit read access to the specific site or file that Copilot cannot reach.
Why Copilot Shows the No Access Error
Copilot in Microsoft 365 uses Microsoft Graph to retrieve content from your tenant. When Copilot cannot read a file, email, or calendar event, it displays the access error. The root cause is one of three things:
Missing Copilot license or service plan. Each user must have a Copilot for Microsoft 365 license assigned. Without it, Copilot cannot authenticate to Microsoft Graph on behalf of that user.
Restricted content permissions. Copilot respects existing SharePoint, OneDrive, and Exchange permissions. If the user does not have at least Read access to a file or folder, Copilot will refuse to show it.
Copilot data source configuration. An administrator can disable certain data sources in the Copilot settings. If SharePoint or OneDrive is turned off, Copilot cannot index or return content from those locations.
Steps to Fix the No Access Error
- Verify the Copilot license assignment
Sign in to the Microsoft 365 admin center. Go to Billing > Licenses. Select the Copilot for Microsoft 365 product. Check that the affected user appears in the list of licensed users. If the user is missing, assign the license by selecting the user and clicking Assign license. - Assign the Copilot Administrator role
In the admin center, go to Roles > Role assignments. Search for Copilot Administrator. Click the role name, then click Assigned admins. Add the user who needs full control over Copilot settings. This step is optional for end users but required if you need to change data source settings yourself. - Enable required data sources in Copilot settings
Go to Settings > Org settings. Find Copilot in the list and click it. Under Data sources, make sure SharePoint and OneDrive are set to On. Click Save. Wait up to 15 minutes for the change to propagate. - Check SharePoint site permissions for the affected content
Open the SharePoint admin center. Go to Sites > Active sites. Locate the site that contains the content Copilot cannot access. Click the site name and then select Permissions. Under Direct access, click Add people. Enter the user's name and assign the Read permission level. Click Save. - Verify OneDrive sharing settings
If the content is stored in OneDrive, the file owner must share it with the user. In OneDrive, right-click the file and select Share. Type the user's email address and set the permission to Can view. Click Send. - Test Copilot access again
Open a supported app like Word, Excel, or Teams. In the Copilot pane, type a prompt such as “Summarize the file named Q3 Report.docx.” If the error persists, wait 10 minutes and repeat the test. Permissions changes can take time to sync across Microsoft 365.
If Copilot Still Shows the Access Error After the Main Fix
Copilot returns no results for calendar or email content
If Copilot works for files but fails for calendar or email, the issue is likely an Exchange Online permission. The user must have at least Reviewer role on the mailbox. In the Exchange admin center, go to Recipients > Mailboxes. Select the mailbox, click Mailbox delegation, and add the user with Read permission.
Copilot cannot access content in a private channel
Private channels in Teams store files in a separate SharePoint site. The user must be a member of that private channel. In Teams, go to the channel, click the three dots, and select Manage channel. Add the user as a member. Wait a few minutes, then try the Copilot prompt again.
Copilot shows the error only for external users
Copilot cannot access content shared from outside your tenant. External sharing must be enabled at the tenant level. In the SharePoint admin center, go to Policies > Sharing. Set external sharing to Anyone or New and existing guests. Also ensure the specific site allows external sharing in its site-level settings.
Copilot Access Permissions: Admin vs End User
| Item | Admin Role | End User Role |
|---|---|---|
| Description | Manages Copilot settings and data sources for the tenant | Uses Copilot to interact with content they already have permission to view |
| License required | Copilot for Microsoft 365 | Copilot for Microsoft 365 |
| Permissions needed | Copilot Administrator or Global Administrator | Read access to the specific file, folder, or mailbox |
| Data source control | Can enable or disable SharePoint, OneDrive, Exchange, and Teams | Cannot change data sources |
| Content restrictions | Can override some restrictions via admin policies | Bound by existing user permissions |
After following the steps above, you should be able to use Copilot without the access error. Start by verifying the license and data source settings, then check individual file permissions. If the issue involves email or calendar, review Exchange delegation settings. For persistent problems, use the Copilot diagnostic logs available in the Microsoft 365 admin center under Health > Service health > Copilot to identify blocked requests.